$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/64a2760e-bc92-316b-98c1-32760a4f7d87.roa File: 64a2760e-bc92-316b-98c1-32760a4f7d87.roa (raw, json) Hash identifier: V2yrvzommtFkcCfVkbuf4/6c0C4HkxBq++J5y5v6OOs= Subject key identifier: A7:56:90:86:F9:51:75:18:80:3B:07:06:63:74:D3:19:64:86:34:C1 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848ADC6089240EABDFBB4E13E80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/64a2760e-bc92-316b-98c1-32760a4f7d87.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 21723 IP address blocks: 207.194.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:08:92:40:ea:bd:fb:b4:e1:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=9c9eaf51-2641-447a-9840-02c91b94caa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7b:e9:37:44:e9:b1:22:38:63:6a:f2:12:2f: 2d:1b:f3:99:5b:2c:76:b0:ab:4f:d4:fb:ab:93:c0: e2:25:cc:cf:5f:72:4f:61:a9:ab:2a:9f:30:db:c1: c4:a4:d6:b4:ad:fa:7b:cc:a0:e0:85:a8:ab:ec:44: 91:6f:42:63:e3:61:65:d7:ba:8b:64:da:dd:70:8b: f7:e9:4d:74:6d:f5:3a:a0:f5:1b:fc:86:f4:c2:11: 88:79:6c:37:73:32:04:bb:60:4c:50:84:53:4f:a9: 7e:fc:d9:69:74:d0:ad:14:83:67:f7:c1:d4:0b:0f: eb:11:af:b1:73:9f:b5:25:bd:e7:4c:a2:d5:d1:8e: c8:32:bf:e0:2c:ee:8e:e5:37:95:ed:3b:78:48:da: 22:9a:fd:d7:a4:cb:8a:15:25:ad:4d:2e:e0:db:01: db:47:cc:5c:da:d8:c9:43:1d:eb:8c:61:8c:a3:07: 39:03:15:f5:40:a3:87:03:69:24:e2:42:f7:07:a6: f5:31:47:fc:4d:8b:b2:e6:30:62:50:94:fd:59:51: 50:89:c7:0f:35:6b:2e:94:9e:ac:82:17:86:df:39: 40:89:70:20:06:95:86:f1:7e:78:ed:d4:a3:37:e2: 24:cc:35:ba:04:3f:c2:65:db:be:e3:a6:76:a1:bd: f7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:56:90:86:F9:51:75:18:80:3B:07:06:63:74:D3:19:64:86:34:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/64a2760e-bc92-316b-98c1-32760a4f7d87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:43:3c:b5:41:f6:98:d6:7c:c0:91:87:27:03:bd:8e:24:92: 67:20:69:73:de:f1:c7:cb:77:bd:92:bb:b2:59:f3:eb:ef:53: 3f:c5:85:97:69:44:17:a2:1f:dc:39:96:22:f4:cf:ab:5f:b6: 9e:ba:d4:18:20:66:2b:a9:41:65:21:69:af:89:10:51:50:d3: e2:bd:c9:06:f6:57:c7:a8:33:5e:71:1e:15:53:52:d1:fd:d3: 80:03:7c:fa:fa:bd:38:c5:29:e5:c4:31:fa:39:1a:44:42:a5: 22:50:80:ef:de:1a:81:b5:48:33:45:3d:2a:69:23:7f:93:70: 63:00:48:51:0a:55:0d:d2:3c:36:d2:e2:f3:08:a8:8b:7e:56: 76:13:ab:bd:db:cb:a0:40:e5:db:0b:bf:db:7a:06:de:16:f8: b8:1d:7b:e9:1f:eb:e7:07:23:37:30:09:6c:10:ae:3c:99:b4: ee:0f:67:06:d7:1b:e5:cd:b4:8e:23:d3:89:d8:d8:b5:36:4e: 40:3c:81:89:55:9d:9b:b0:13:21:9b:56:3a:1a:f2:cb:9c:4d: 00:94:17:4a:aa:19:01:93:3a:ea:e4:8f:98:5e:7e:08:bd:ac: 93:b8:2d:a2:bc:37:e4:0d:d5:24:67:d5:47:17:2a:5a:b8:f0: 71:96:d7:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgiSQOq9+7ThPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk OWM5ZWFmNTEtMjY0MS00NDdhLTk4NDAtMDJjOTFiOTRjYWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnvpN0TpsSI4Y2ryEi8tG/OZWyx2sKtP1Pur k8DiJczPX3JPYamrKp8w28HEpNa0rfp7zKDghair7ESRb0Jj42Fl17qLZNrdcIv3 6U10bfU6oPUb/Ib0whGIeWw3czIEu2BMUIRTT6l+/NlpdNCtFINn98HUCw/rEa+x c5+1Jb3nTKLV0Y7IMr/gLO6O5TeV7Tt4SNoimv3XpMuKFSWtTS7g2wHbR8xc2tjJ Qx3rjGGMowc5AxX1QKOHA2kk4kL3B6b1MUf8TYuy5jBiUJT9WVFQiccPNWsulJ6s gheG3zlAiXAgBpWG8X547dSjN+IkzDW6BD/CZdu+46Z2ob33GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdWkIb5UXUYgDsHBmN00xlkhjTBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjRhMjc2MGUtYmM5Mi0z MTZiLTk4YzEtMzI3NjBhNGY3ZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8LQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL1DPLVB9pjWfMCRhycDvY4kkmcgaXPe8cfLd72Su7JZ8+vvUz/FhZdp RBeiH9w5liL0z6tftp661BggZiupQWUhaa+JEFFQ0+K9yQb2V8eoM15xHhVTUtH9 04ADfPr6vTjFKeXEMfo5GkRCpSJQgO/eGoG1SDNFPSppI3+TcGMASFEKVQ3SPDbS 4vMIqIt+VnYTq73by6BA5dsLv9t6Bt4W+Lgde+kf6+cHIzcwCWwQrjyZtO4PZwbX G+XNtI4j04nY2LU2TkA8gYlVnZuwEyGbVjoa8sucTQCUF0qqGQGTOurkj5hefgi9 rJO4LaK8N+QN1SRn1UcXKlq48HGW1yw= -----END CERTIFICATE-----Generated at Tue Apr 8 07:21:28 2025 by rpki-client